Static task
static1
Behavioral task
behavioral1
Sample
d5b9e6bbf3fb13bc1a51a72c875f3d00_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5b9e6bbf3fb13bc1a51a72c875f3d00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5b9e6bbf3fb13bc1a51a72c875f3d00_JaffaCakes118
-
Size
36KB
-
MD5
d5b9e6bbf3fb13bc1a51a72c875f3d00
-
SHA1
4ea2bd7bf1c82707fdb64735571e8d1e6ebca0db
-
SHA256
a196ebbbf24cc003417f6e04d8cf0c9dac692b10496fc716dc03584e291bdab0
-
SHA512
9e5786ad7ba94e51f40dc1a5c7b59ffa5486bae08d0183135b03b6eb83096454419bd4af8ae56c46373baf86d0cf86cb72ef0e6915fc69814c7ae05337b2ce34
-
SSDEEP
192:EMZyWlMltbuWqwI8MIX3obyzzpEB5PnXpobM1a9KXzzSz93y+n98InouVK8+Z/N7:EyMjawobyzyB5PObM1gE14TY4Tq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5b9e6bbf3fb13bc1a51a72c875f3d00_JaffaCakes118
Files
-
d5b9e6bbf3fb13bc1a51a72c875f3d00_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 19KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE